1 Use of Job Tickets to Secure Resource Access 

2 Technical Field 

3 The technical field is integration and control of services in a networked environment. 

4 Background 

5 Services may be provided by one or more operating units in a computer-based network. 

6 Users of the network may generate specific tasks and send the tasks into the network to be 

7 assigned to one of the operating units. For example, a user at a computer terminal may generate 

8 a printing order using a printer driver installed on the terminal The printer driver is used to control 

9 the printing request. In another example, a user at a computer terminal may generate a printing 

1 0 order and send the printing order into a computer network so that the printing order is completed 

11 by a printing service. The printing order may be related to a company brochure. The printing order 

1 2 may contain unique requirements such as paper type, font size, layout, graphics, color, and other 

1 3 requirements . The user may specify that a specific printing service, such as Kinkos, prepare the 

1 4 company brochure. Alternatively, the computer network may include programs that suggest 

1 5 printing services to the user. 

16 To control theprintingjob,theuser'scomputerterminalmay generateajob ticket. The 

17 job ticket includes the requirements, such as the requirements listed above, and an identification of 

1 8 the specific job that allows the job status to be tracked through the computer network. 

1 9 Use of the job ticket allows printing and similar services to be allocated to those resources 

20 (i.e., the operating units) that are best suited to completing the services. Unfortunately, current 

21 computer systems do not allow access to the wide variety of services existing in networked 

22 computer systems, such as the Internet. In addition, current systems require users to have some 

23 knowledge of the existing resources, and may require users to include applicable programming to 

24 communicate with the services. Furthermore, current systems do not allow a job request to be split 

25 among several processors. As a result, completion of the job request may take longer than 

26 necessary, and may not be completed in the most efficient, lowest-cost manner. Finally, current 

27 systems do no provide adequate security for job tickets. 
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1 Summary 

2 To overcome these and other problems related to use of a job ticket, a method and an 

3 apparatus allow a client to manage j ob attributes and processes using an electronic service center. 

4 The service center includes ajob ticket service that allows access and modification of ajob ticket 

5 by multiple users on a network. The method and apparatus use a network-accessible j ob ticket 

6 to relate to a specific j ob or content. The j ob ticket may be an obj ect, such as an XML obj ect, 

7 comprising routines and data. The content may be stored on the network and may be accessed 

8 by multiple job tickets. Storage and management ofthe job ticket are transparent to the user. The 

9 job ticket is stored in a common location in the network. The job ticket remains in the same 

10 location in the network, and users accessonlythatportionofthejobticketrequired to complete 

1 1 a designated process. Security measures may be added to limit access to those users designated 

12 as being allowed to access die job ticket and the job file. The j ob ticket may include a service ID 

1 3 that relates the j ob ticket back to the originating job ticket service. In this way, a user who acquires 

1 4 all or part of the j ob ticket can refer back to the originating job ticket service (and the original, or 

1 5 as-modified Job ticket) to verify any changes and to ensure that the job ticket being accessed is 

16 up-to-date. The job ticket also includes ajob ID to refer the job ticket to a specific job. 

1 7 The service center is coupled through a communications network to a front end service. 

1 8 The front end service allows a user to generate a service or job request. The communications 

19 network may be the Internet, or a local area network, for example, 

20 The service center includes a service bus, to which are coupled a j ob store, the j ob ticket 

2 1 service, and a work flow controller. Also coupled to the service center are one or more processors 

22 that may be controlled to complete processes and tasks defined in the job tickets. 

23 The job ticket service may generate and store the job tickets. Job content (e.g., a PDF file) 

24 is stored in the j ob store. With this structure, the user does not have to manage storage of the j ob 

25 content or to know which job store holds the job content. Thejob ticket service controls access 

26 to the j ob tickets, and, through the use of the j ob tickets, also controls access to j ob content in the 

27 job store, or elsewhere in the network. Thejob ticket service may create a reference to thejob 

28 ticket, and may use the reference to control access to the job ticket. 

29 A j ob ticket service center may include several features to provide security and to control 
3 0 access to the j ob ticket. In an embodiment, the j ob ticket service may employ branch locking. In 
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1 an alternate embodiment, servers may be used to authorize and authenticate a processor. An 

2 authentication server receives authentication information from a processor and an authorization 

3 server uses the information to check authorization functionality. The authorization or access rights 

4 of the processor may be carried as apart of the job ticket. Using the above-described features, 

5 the service center may provide trusted authentication information about the processor to the 

6 authorization server, and the authorization server then performs its authority check functions using 

7 this information. 

8 In an embodiment, the job ticket may be signed with an industry standard public message 

9 digest (MD) signature, and may be protected by a public key encryption system. Hence, any entity 

1 0 that has the public key may validate the job ticket without having to communicate with the 

1 1 authentication server. These features reduce communication between distributed server 

1 2 applications . The features also allow the j ob ticket to be passed from one processor to another 

13 processor, maintaining security, without communicating with the service center. 

14 In an embodiment, when a processor modifies a branch, the processor accesses the j ob 

1 5 ticket service to update the job ticket. The modified job ticket may then be signed before being 

1 6 passed to the next processor. 

17 In yet another alternative embodiment, the j ob ticket holds authentication/ access data, 

1 8 allowing controlled access to the job ticket. Resources may be protected by passwords and other 

1 9 mechanisms. Access to the job ticket may be similarly protected. Furthermore, processors with 

20 access authorization may have such access authorization invoked by listing the processors in the 

21 j ob ticket. The listing may be effectuated by recording a network address for the processors, for 

22 example. The network address may be incorporated in bid information recorded in the j ob ticket. 

23 Description of the Drawings 

24 The detailed description will refer to the following figures in which like numerals refer to like 

25 items, and in which: 

26 Figure 1 is a block diagram showing a prior art use of a job ticket; 

27 Figure 2 is a tree diagram showing the processes in an example job ticket; 

28 Figure 3 is a block diagram of a digital image work flow network; 

29 Figure 4 is a block diagram of a service center used with the network of Figure 3; 

30 Figures 5 A-5D illustrate an exemplary job ticket; 
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Figure 6 is a diagram of functions controlled by a job ticket service; 
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Figure 7 is a diagram showing access functions controlled by the job ticket service; 
Figure 8 is a block diagram illustrating additional control features of the job ticket service; 
Figure 9 is a flow chart illustrating one of the processes controlled by the j ob ticket service; 
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and 
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Figures 1 0-1 5 are flow charts showing sub-processes in the overall process illustrated in 



7 Figure 9. 



8 Detailed Description 
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Figure 1 is a block diagram showing a prior art application of a job ticket service. Job 



1 0 tickets are often associated with a printing standard, the j ob definition format ( JDF). The JDF is 

1 1 described in detail in JDF Specification Draft Spiral 4.0, available at www.hp_opensource.com. 

12 which is hereby incorporated by reference. InFigure l,auser 1 generates ajob request and sends 

1 3 the j ob request through a portal 4 to a processor 5 . The j ob request may include a j ob ticket data 

1 4 file 2 and a content file 3 . The user 1 may be a computer terminal in a networked computer system 

15 and the processor 5 may be a networked printer. The job request may involve printing a 

1 6 document. The document may be represented by the content 3 , which is a digital representation 

1 7 of text and images to be printed. The intended format of the printed document may be described 

18 in the job ticket file 2, which is simply a digital file that specifies how the printer is to print the 

1 9 document. For example, the j ob ticket file 2 may require that the document be printed on back-to- 

20 back pages. 

21 In a specific application, the functions of the j ob ticket file 2 may be carried out by a printer 

22 driver. The printer driver encodes control data related to printing the document, and sends the 

23 control data and the content 3 to the printer (i.e., the processor 5). The printer accesses the control 

24 data and the content 3 to print the document. 

2 5 While the application shown in Figure 1 works well to print a document, the application has 

26 many drawbacks . In particular, if multiple processors are involved in producing the document, 

27 each such processor will require access to the job ticket file 2 . This access brings problems related 

28 to security, modification control and workflow control. For example, each processor requiring 

29 access to the j ob ticket file 2 may have to wait on processing until a prior processor has completed 
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1 use of the job ticket file 2. Thus, the prior art application may result in unwanted delays in 

2 completing the j ob request. 

3 Prior art applications of j ob ticket services also suffer because the user may not know 

4 anything about the processors, including capabilities and availabilities of the processors, or even if 

5 the processors exist. Thus, the user may not know which portal to use to connect to a specific 

6 processor. 

7 These and other problems are solved by a method and an apparatus that controls access 

8 to a j ob ticket and associated content through use of a j ob ticket service. The j ob ticket service 

9 includes mechanisms that arbitrate access to the job ticket among multiple users of the job ticket, 

1 0 limit access to the job ticket by incorporating security features, and ensure modifications made by 

1 1 one processor or user are reflected in the job ticket and the content. In effect, the apparatus 

1 2 includes a generic database that couples input data from clients as job requests with output services 

1 3 such as processors that perform tasks or processes to complete the j ob requests . The database 

1 4 may have the features of a generic XML database in that it is extensible, and in that the clients need 

1 5 not have any knowledge of the individual processes to be performed, or the internal programming 

1 6 requirements of the processors. Thus, the clients may submit job requests to a service center that 

1 7 will ensure that an appropriate processor or processors are assigned to complete the j ob request. 

1 8 Before describing the apparatus and method in detail, a review of a job ticket is provided. 

1 9 Figure 2 is a node-tree diagram (or simply a node tree) 1 0 that illustrates processes defined in a 

20 job ticket for printing a brochure. The brochure may be printed on a commercial press, and may 

2 1 use digital content to generate plates for printing the brochure. Within the node tree 1 0, the nodes 

22 specify a product, process, or group of processes. Each node may modify, consume or create 

23 resources. Each node may contain further nested nodes, or sub-nodes. The arrangement of nodes 

24 and sub-nodes may be likened to a tree, and each node and sub-node may be referred to as a 

25 branch. A brochure node 1 1 defines the features and parameters of the brochure. A cover node 

26 12definestheparametersforproducingthebrochurecover. Inside pages node 13 includes the 

27 parameters to produce the inside pages. The inside pages node 1 3 is shown with several sub- 

28 nodes, including a sub-node 14 for digital plate making. The digital plate making sub-node 14 itself 

29 includes two additional sub-nodes, a ripping sub-node 16 and a plate making sub-node 18. 
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1 Each of the nodes and sub-nodes shown in Figure 2 has associated with it input resources 

2 and at least one output resource. A resource may be described by parameters or logical entities. 

3 The resource may be a physical entity such as a component, a handling resource, or a consumable. 

4 A component resource may be the output of a node or sub-node, such as a printed sheets. A 

5 handling resource is used during a process, but is not consumed by the process. A consumable 

6 resource may be partly or wholly consumed by the process. Examples of consumable resources 

7 include inks, plates, and glue. Other resources may be a digital file or representation of a physical 

8 object. For example, the ripping sub-node 1 6 may include as input resources a run list, media, RIP 

9 parameters, and layout. The run list resource describes the pages, including the files in which the 

1 0 pages occur, and which pages are to be used. The media resource describes the media that will 

11 be used to make plates, and is needed to describe the dimensions of the media. The RIP 

1 2 parameters resource describes all device-specific parameters of the ripping process. The layout 

1 3 resource describes placement of source pages onto the plates, and eventually onto press sheets. 

14 As an output resource, the ripping sub-node 1 6 may provide ripped flats. Other resources include 

1 5 parameter resources, which define the details of processes, as well as other non-physical computer 

1 6 files used by a process. 

17 Thenodetree 10 shown in Figure 2 is intended to apply to printing a document. However, 

1 8 node-tree diagrams may be used to represent j ob tickets for other services besides printing. For 

1 9 example, a job ticket may be used for data processing, image processing, creating and maintaining 

20 a database, electronic publishing, e-mail, and various e-commerce services. Moreover, the j ob 

21 ticket may be used to allow different e-commerce services to interact with each other. 

22 Figure 3 is a block diagram of a digital imaging work flow (DIW) network 20 that 

23 incorporates a service center and a job ticket service to control tasks submitted by clients. The 

24 service center may operate as a single portal through which the clients connect to one or more e- 

25 services including e-mail, e-commerce and online shopping, e-printing, and data services, including 

26 database searching and database construction, population and maintenance . In an alternative 

27 embodiment, the service center may comprise multiple portals, with each of the multiple portals 

28 being dedicated to a specific e-service, or being provided to increase bandwidth. Using a single 

29 portal, such as the service center, allows the clients to select from a wide variety of e-services, such 

30 as those noted above, without requiring the clients to have any prior knowledge of the e-services. 
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1 The service center may include components that receive information in the form of job 

2 requests, and using the information, create a job ticket that specifies tasks and resources. The job 

3 ticket may be stored in a j ob ticket service, and notices may be posted to indicate when a j ob ticket 

4 is available. Processors coupled to the service center may bid on completion of the j ob ticket, and 

5 the service center may include a bidding service that evaluates bids. The service center may select 

6 one or more processors to assign to the job ticket based on client-supplied criteria, or based on 

7 a set of standard criteria, including industry standard criteria. The service center may provide 

8 mechanisms to control access to the j ob ticket, or to portions (branches) of the j ob ticket. The 

9 mechanisms include branch locking, and authorization and authentication servers that use public key 

1 0 encryption, or similar processes. 

1 1 The service center may include hardware components such as servers, computers, central 

1 2 processing units, communications interfaces, and memory devices to provide the processing 

13 capability and data storage required to carry out the above-described functions. 

1 4 The DI W network 20 includes a front end service 3 0 that allows a client 3 1 to generate 

1 5 and submit a service or job request 32 (see Figure 7). In an embodiment, the front end service 30 

1 6 may be an Internet web browser. Alternatively, the front end service 3 0 may be a web application 

17 or a port monitor. The job request 32 may contain detailed information about how the job is to be 

1 8 executed, and may be formatted according to the job definition format standard. Alternatively, the 

19 job request 32 may include only basic information, which will be used by another component to 

20 finalize the j ob definition, or work flow. Finally, the job request 32 may include the content, or j ob, 

2 1 that is to be processed. The content could be one or more digital files, text files, and other files. 

22 The front end service 3 0 is coupled to a communications network 3 5 , which may be the Internet 

23 or a local area network, for example. Coupled to the communications network 3 5 is a service 

24 center 40 that links one or more processors 80j to the communications network 3 5 . Each of the 

25 processors 80j may include a cache 8 1 1 that may be used to store information related to a job 

26 request 32, including information related to j ob tickets. In an embodiment, the service center 40 

27 may be an Internet web site that includes data storage and control functions. In another 

28 embodiment, the service center 40 is a node in a local area network. 

29 The service center 40 allows abroad spectrum of communications between entities coupled 

30 to the service center 40 . In particular, the service center 40 allows different e-services to interact 
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1 programmatically with one another using specific protocols and generic protocols (e.g., TCP/IP). 

2 This programmatic interaction allows different services and processes that are coupled to the 

3 network to exchange data and files, and to modify the data and files. The programmatic interaction 

4 may be completed by use of a remote procedure call (RPC) between entities coupled to the service 

5 center 40. Other methods for providing the programmatic interaction include CORBA, UDDI, and 

6 e-speak. 

7 Figure 4 is a diagram of the service center 40. The service center 40 includes a service bus 

8 4 1 in communication with the communications network 3 5 and the processors 80 1 of Figure 3 . 

9 Coupled to the service bus 4 1 is a j ob store 5 0, a j ob ticket service 60, a work flow controller 70, 

10 an optional bidding service 90, an authorization server 92 and an authentication server 94. The job 

1 1 store 50 may store one or more job content files 5 lj. The job ticket service 60 may control one 

12 or more job tickets 6 1 v The work flow controller 70 may use one or more agents 7 1 1 to control 

1 3 processes on the service bus 41 . 

1 4 The job store 50, job ticket service 60 and work flow controller 70 function to accept 

1 5 information from the clients 3 1 , and to use the information to control the actions of the processors 

16 80}. The processors SOiperforms specific tasks or processes as determined by the service center 

17 40. 

1 8 The j ob store 50 may be a node on the service bus 4 1 , and may include programming to 

1 9 allow the job store 50 to carry out its functions. The job store 50 maybe used to store the content 

20 51, which may be in the form of one or more large files. In the context of printing a document using 

21 a service or process coupled to the service bus 41, the job store 50 may store the document 

22 content in one or more PDF files, for example. The content 5 1 may include graphics and text. The 

23 content 5 1 for a specific document may include several files. For example, a brochure may have 

24 a separate file for the cover and another file for the inside pages. Text for the inside pages may be 

25 in one file and images in yet another file. The content 5 1 may also include links to other resources 

26 or entities on the service bus 4 1 . The job store 50 provides for mass storage of the content 5 1 , so 

27 that a user (client 3 1 or processor 80) does not have to provide the mass storage required for the 

28 job content 5 1. By using the mass storage capabilities of the job store 50, the content 5 1 may be 

29 made to persist in the network 20, andmay be made accessible to users at any time. The job store 

30 50 also manages and controls the content so that the user (client 3 1 or processor 80) does not have 
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1 to manage the content 5 1 . Management functions include maintaining configuration or version 

2 control of the content 5 1 , controlling access to the content 5 1 , and maintaining the content 5 1 in 

3 storage. 

4 The job ticket service 60 holds job tickets 61 . The job ticket service 60 controls access 

5 to and may manage configuration of the j ob tickets 6 1 . For example, the job ticket service 60 may 

6 allow users (clients 31 andprocessors80)toaccessaportionorbranchofajobticket61 rather 

7 than passing the job ticket 6 1 among multiple users. Access to the job ticket portion may be 

8 effectuated by use of an application programming interface, a scriptable interface, or a similar 

9 feature. As noted above, the job ticket 61 does not include the content 5 1 (e.g., the graphical and 

1 0 text files of a document), but the job ticket 6 1 relates to content 5 1 (e.g., a PDF file) stored in the 

11 j ob store 50. The user does not have to manage storage of the j ob content or to know which job 

12 store 50 holds the job content. The job ticket service 60 instead passes a reference in the job 

13 ticket 61. This allows multiple clients 31 and processors 80j to access the content 51. 

1 4 Furthermore, the content 5 1 may relate to more than one job ticket 6 1 . The job ticket service 60, 

1 5 and its interrelationships with other entities coupled to the service bus 4 1 , will be described later 

16 in detail. 

17 Some job tickets 61 may be accessed by multiple processors 80, in either serial, 

1 8 overlapping, or simultaneous fashion. The multiple access processing could result in problems with 

1 9 use of the j ob ticket 6 1 . For example, a first processor may acquire the j ob ticket 6 1 (or a portion 

20 or branch thereof), and perform a process specified in the work flow, which may modify the 

2 1 branch. Such modification may be to indicate a branch as complete, use up input resources, or 

22 create new output resources, for example. A second processor could attempt to acquire the 

23 branch, butmightnot"know''thatthefirstprocessorhadmodified the branch. Alternatively, iftwo 

24 processors compete for the same branch, a deadlock situation might occur. 

25 One solution to the above problems may be to lock the job ticket 61 whenever a processor 

26 80 acquires thejob ticket 61. Unfortunately, locking thejob ticket 61 may prevent concurrent or 

27 parallel processing and may slow down completion of the job request 32. 

2 8 Thejob ticket service 60 shown in Figure 4 overcomes these and other problems by having 
29 the capability to lock the job ticket 61 at the branch level. The branch locking may be 

3 0 accomplished by one of several methods. The work flow controller 70 may assign one or more 
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1 specific processors 80, to perform the tasks identified with the branch to be locked. Where only 

2 one processor 80 is authorized access to the branch, branch locking may not be required. Where 

3 more than one processor 80 is authorized access to the same branch, the job ticket service 60 may 

4 lock the branch when one of the authorized processors 80! actually acquire the branch. 

5 If the work flow controller 70 has not assigned processors 80, to branches (i.e., any 

6 processor 80 may access abranch at any time), the job ticket service 60 may lock the branch when 

7 a processor 80 acquires the branch. 

8 The job ticket service 60 may lock the branches by setting a lock/unlock flag for each 

9 branch. Processors 80,accessingthejobticket61 may then review the lock/unlock flag status to 

1 0 determine if the branch may be accessed. In some circumstances, the j ob ticket service 60 may 

1 1 allow access only to those branches that are unlocked. A processor 8 0 that has completed a task 

12 defined by the branch may need to have the branch unlocked in order to modify the branch. 

1 3 The work flow controller 70 may be used to create the j ob tickets 6 1 that are stored in the 

14 j ob ticket service 60. The work flow controller 70 may review the j ob requests 3 2 submitted by 

1 5 the clients 3 1 , and may then use a j ob ticket template to prepare the j ob ticket 6 1 . The work flow 

16 controller 70 may then send the job ticket 61 to the job ticket service 60 for storage and 

17 processing. 

1 8 The work flow controller 70 also controls completion of tasks among the processors 80,. 



19 In an embodiment, the work flow controller 70 determines which of the processors 80, have the 

20 necessary and available resources to begin the processes listed in a specific job ticket 61 . The 

21 work flow controller 70 then designates the appropriate processors 80, to complete the tasks 

22 referenced by the job ticket 6 1 . For example, if a job ticket 6 1 } requires color printing, the work 

23 flow controller 70 may determine that only processor 80 3 is a color printer with the capacity to 

24 begin thejob specifiedin thejob ticket 61 j. This embodiment in which the work flow controller 

25 70 determines which processors 80, to assign to a specific job ticket 61 may be especially 

26 appropriate when the network 35 is a local area network and all processors 80, are directly 

27 coupled to the local area network 35. 

28 Alternatively, the work flow controller 70 may receive bid information from Internet- 

29 connected processors 80, and may use the bid information to select the processors 80, to complete 

30 the j ob request 32. 
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1 The work flow controller 70 may also be used to designate the various nodes, input and 

2 output resources, and other features of the node tree used to complete the job request. That is, the 

3 work flow controller 70 may be used to create a construct, or work flow, such as the node tree 

4 10 shown in Figure 2. To accomplish these tasks, the work flow controller 70 may include one or 

5 more agents 7 1 that write a job definition file, based on control data contained in the job request 

6 32. Alternatively, a separate management information system (not shown) may be used to create 

7 the nodes, and to control flow of tasks to the processors 80^ and other entities. In yet another 

8 embodiment, the job definitions maybe written by the client 3 1 that originated the job request 32. 

9 Referring again to the node tree 1 0 of Figure 2, many output resources of the individual 

10 nodes serve as input resources for other nodes. These other nodes may not be able to begin 

1 1 executing until all input resources are complete and available, which means that the nodes may need 

1 2 to execute in a well-defined sequence. For example, a process for making plates will produce 

1 3 press plates as an output resource that is required by a printing process. In the hierarchical 

1 4 organization of the node tree 1 0, nodes that occur higher in the node tree 1 0 represent higher-level, 

1 5 more abstract operations, while lower order nodes represent more detailed, specific processes. 

16 Moreover, nodes near the top of the node tree 10 may represent only intent regarding the 

1 7 components or assemblies that comprise the product, and lower level nodes provided the detailed 

1 8 instructions to a processor 80 to perform a specific process. 

1 9 Because two node trees may not be similar, the work flow controller 70 may determine 

20 processes to be completed, the order in which the processes are completed, and the processors 

21 80 2 that are to complete the processes. The work flow controller 70 may use the agents 71 to 

22 determine an actual work flow, considering factors such as control abilities of the processors 80j 

23 that complete the processes, transport distances between processors, load capabilities of the 

24 processors 80„ and time constrains in the j ob request, for example. The agents 7 1 may define the 

25 overall process using serial processing, which involves subsequent production and consumption of 

26 resources by the processors 80 i? overlapping processing, which involves simultaneous consumption 

27 and production of resources by more than one processor 80, parallel processing, which involves 

28 sharing resources among processors 80, and iterative processing, which involves aback and forth 

29 processing scheme to develop resources. 
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1 In determining which of the processors 80, to assign to complete a particular j ob request, 

2 the work flow controller 70 may poll processors 80 l that are coupled to the service center 40. As 

3 noted above, the processors 80 t may be coupled directly to the service bus 4 1 , or may be coupled 

4 indirectly through another communications bus, such as the Internet, for example. The polling may 

5 occur whenever ajob ticket 61 is created by the job ticket service 60. Alternatively, the polling 

6 and corresponding information collection may occur on a periodic basis, and the work flow 

7 controller 70 may store information related to the processors 80. 

8 As an alternative to polling, processors 80, coupled to the service center 80 may monitor 

9 the job ticket service 60. The job ticket service 60 may periodically post, in a bulletin board 

1 0 fashion, for example, notices for job tickets that are available for processing. The processors 80 

1 1 may then submit a bid for the tasks and processes defined in the j ob ticket notice. The work flow 

1 2 controller 70, or the separate, optional bidding service 90, may review the bids, and determine 

1 3 which single processor 80 or combination of processors 80! would be best suited to complete the 

1 4 tasks and processes defined in the job ticket notice. 

1 5 The service center 40 may include several features to provide security and to control access 

1 6 to the job ticket 61 . As discussed above, the job ticket service 60 may include a provision for 

1 7 branch locking. In addition, servers may be used to authorize and authenticate a processor 80 and 

1 8 maintain the authorization and authentication during completion of ajob request 32 (see Figure 7). 

1 9 The authentication server 92 receives authentication information from a processor 80 and the 

20 authorization server 94 uses the information to check authorization functionality. The authorization 

21 or access rights of the processor 80 may be carried as apart of the job ticket 61 . The servers 92 

22 and 94 may be hardware devices, but need not exist in the same hardware platform, and the 

23 servers 92 and 94 need not be tightly coupled. Alternatively, the functions of the servers 92 and 

24 94 may be performed in programming stored in one of the components of the service center 40, 

25 such as the work flow controller 70, for example. Using the above-described features, the service 

26 center 40 may provide trusted authentication information about the processor 80 to the 

27 authorization server 94, and the authorization server 94 then performs its authority check functions. 

28 Thejob ticket 61 may be signed with an industry standard public key encryption message 

29 digest (MD) signature, and may be protected by a public key encryption system. Hence, any user 

30 that has the public key may validate thejob ticket 6 1 without having to communicate with the 
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1 authentication server 92. These features reduce communication between distributed server 

2 applications. The features also allow the job ticket 6 1 to be passed from one processor 80 to 

3 anotherprocessor 80, maintaining security, without communicating with the service center40. 

4 In an alternative embodiment, the job ticket 6 1 holds authentication/access data, allowing 

5 controlled access within the service center 40 infrastructure. Resources may be protected by 

6 passwords and other mechanisms. Access to the job ticket 61 may be similarly protected. 

7 Furthermore, processors 80, with access authorization may have such access authorization invoked 

8 by listing the processors in the j ob ticket. The listing may be effectuated by recording a network 

9 address for the processors 80 1? for example. The network address may be incorporated in the bid 

1 0 information recorded in the j ob ticket 6 1 . 

11 Although the above descriptionrefers to development by the work flow controller 70, other 

1 2 components in the network 20 may be used to develop an overall work flow to complete the j ob 

1 3 request 32. For example, the j ob ticket service 60 may be used to develop the overall work flow. 

1 4 As discussed above, the bidding service 90 may be used to receive bid information from 

1 5 processors 80 x coupled to the service center 40. The processors SO, submit bids in response to 

1 6 posting of j ob ticket notices at the service center 40. In an embodiment, the job ticket notice is a 

17 separate object stored inthe service center 40. In another embodiment, thejob ticket 61 itself 

1 8 serves the notice function. The work flow controller 70 may post the job ticket notices after receipt 

1 9 of the job request 32. Whether the bidding service 90 or the work flow controller 70 receives the 

20 bids, the bid evaluation and selection process may be the same. 

2 1 The j ob ticket notice posted by the work flow controller 70 may include specific tasks or 

22 processes (branches) that must be completed to complete the job request 32. A simple job request 

23 32 may have only one branch. More complex job requests 32, such as the job request illustrated 

24 in Figure 2 (i.e. , print a brochure) may have many branches . Furthermore, some branches may be 

25 so interrelated that they can only be completed in a specific sequence, while other branches can be 

26 completed in a parallel or an overlapping fashion. This interrelationship may often be the result of 

27 one branch producing an output resource that is an input resource for one or more other branches. 

28 The job ticket notice may include descriptions of specific branches and their interrelationships in 

29 sufficient detail to allow the processors SO, to bid for completion of the branches. The j ob ticket 
3 0 notice may persist in the service center 40 for a specified time to allow the processors 80i to send 
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1 bids. The time may be a set value (e.g., one hour) or may be based on a completion deadline 

2 specified in the j ob request 3 2 . 

3 The bidding service 90 may select bids 9 1 from the processors 80 based on set criteria. 

4 For example, the job request 32 may specify minimum performance requirements (e.g., amaximum 

5 cost and a completion deadline). The bidding service 90 may reject any bids that fail to satisfy the 

6 minimum performance requirements. Where the work flow controller 70 has established multiple 

7 branches,eachsuchbranchmaymcludenim^ The branch-specific 

8 performance requirements may be established by the work flow controller 70 based on overall 

9 performance requirements for the j ob ticket 6 1 . A processor 80 that bids on a particular branch 

10 may be rejected by the bidding service 90 if the processor 80 fails to meet the minimum 

1 1 performance requirements. 

1 2 If the client 3 1 does not specify any minimum performance requirements, the bidding 

1 3 service 90 may apply a standard set of criteria (e.g., an industry standard). In addition, the bid 

1 4 must satisfy any requirements for producing output resources. In this way, bids that are made in 

1 5 error, or that would otherwise likely be rej ected, can be screened out. For example, a bid for 

1 6 printing inside pages of the brochure may indicate a one year completion date. Such a bid may be 

1 7 rejected, even in the absence of any specified performance requirements from the client 3 1 . 

18 Inadditionto subnutting performance requirements, the client 31 may specify an evaluation 

1 9 algorithm for evaluating bids. For example, the client 3 1 may specify that cost is to be weighted 

20 twice as much as any other performance requirement. 

21 In the absence of a client-specified evaluation algorithm, the bidding service 90 may apply 

22 a standard evaluation algorithm in order to rank bids for each branch in the work flow. The 

23 evaluation algorithm may apply weighting criteria, or may apply a default rule. For example, bids 

24 may be ranked based on a maximum score, where points are awarded for cost estimates below 

25 amaximum and for completion times below a maximum. Once the evaluation algorithm has been 

26 applied, the bidding service 90 ranks the bids for each branch. If only one processor 80 survives 

27 the process, that processor 80 may be automatically selected and assigned to the branch. If 

28 multiple processors 80! survive, the bidding service 90 may provide a list of such processors 80; 

29 to the work flow controller 70, which will then select the processors 80 to be assigned to the 
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1 branches. Alternatively, the list may be provided to the client 31, and the client 31 may select the 

2 processor(s) 80 1 to complete the tasks defined in the work flow. 

3 The work flow controller 70 may associate winning bids with corresponding branches, and 

4 may store the bid information with the job ticket 61 . The stored bid information may include 

5 identification information that allows the authorization server 94 and the authentication server 92 

6 to permit access to job ticket branches or to the entire job ticket 61 . Because the bid information 

7 is stored with the job ticket 6 l,aprocessor 80 may access those branches for which the processor 

8 80 is authorized access without having to communicate directly with the j ob ticket service 6 1 . This 

9 feature allows the job ticket 60 to be passed from one processor 80 to another processor 80, 

10 which improves processing time and efficiency. 

11 In an embodiment, the work flow controller 70 accesses control data of the job ticket 6 1 



1 2 to determine which processors) 80 1 should be assigned to the specific task identified in the job 

1 3 ticket. The work flow controller 70 may also identify which of the processors 80^ would be able 

14 to meet the criteria specified in the control data, and may provide a list of such processors 80, to 

1 5 the client through the front end service 30. The client 3 1 may then select a processor(s) 80, from 

16 the list. 



17 In an embodiment, the j ob ticket service may be embodied as a sequence of program 

1 8 instructions stored on a computer-readable storage device, such as a CD-ROM, for example. 

1 9 When loaded into, or coupled to a computer, the program instructions may be read and executed 

20 by a processor of the computer to provide the functions of the job ticket service. 

21 Figure 5A illustrates an exemplaryjob ticket 61. Thejob ticket 61 may include two parts. 



22 A first part includes a framework 62 and an optional client extension 64. The framework 62 

23 includes information, files and programming necessary to control tasks defined in thejob ticket 61. 

24 The client extension 64 may include information related to a specific client (machine) and to a user 

25 ofthemachine. A second part includes a security module 67 that protects thejob ticket 61 from 



26 unauthorized access. 

27 The framework 62 may include ajob identification (ID) 63 , a service ID 65, atask section 

28 68, and a control data section 69. Thejob ID 63 includes a reference to a specific job, or content 

29 51 that is stored in thejob store 50. Thejob ID63 also includes a reference to a particular job 

30 store 50 that is used to store the content 51. An entity that acquires a reference to thejob ticket 
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1 6 1 can use the j ob ID 63 to access the corresponding content 5 1 . Thus, the network 20 shown 

2 inFigure 3 may include multiplejob stores 50, and the job ID 63 may be used to correlate the job 

3 ticket 61 toaspecificjobstoreSO. The service ID 65 identifies a specificjob ticket service 60 that 

4 stores the j ob ticket 6 1 . For example, the network 20 may include multiple j ob ticket services 60 

5 (not shown in Figure 3). The service ID 65 isusedtocorrelatethejobticket61 to the appropriate 

6 job ticket service 60. 

7 The tasks section 68 (Figure 5B) may include branch definitions, and other information 

8 needed to control completion of the branches. The tasks section 68 may be structured so that each 

9 branch or node in a node tree is represented by one or more branches 66, in the tasks section. In 

10 this embodiment, each node in the node tree (e.g., the node tree 10 of Figure 2) can have 

1 1 associated with the node, the description 95, resources 96, lock/unlock flag 97, and security 

12 functions 99. In this way, the job ticket 6 1 reflects a hierarchical database structure. 



1 3 The control data section 69 includes the specific instructions, parameters, and criteria for 

1 4 completing the task identified by the j ob ticket 6 1 . Control data in the control data section 69 may 

1 5 also be associated with each node in a node tree. 

1 6 The security module 67 controls access to a specific j ob ticket. The security module 67 

1 7 may be implemented using standard encryption and access techniques, including public/private key 

1 8 infrastructures, for example. In an embodiment, the security module 67 may include a list of 

1 9 authorized processors 80, that may be given access to one or more branches of the job ticket 6 1 , 

20 or to the entire job ticket 61 . 

2 1 The client extension 64 may contain "custom" information, such as user age, credit card 



22 number and zip code. Information provided in the client extension 64 may be protected by use of 

23 apublic key signature, or similar feature. Hence, all client extension information will automatically 

24 be included in aMessage Digest Protocol (MDP) and will affect the signature ofthejob ticket 61 . 

25 With the above-describe job ticket architecture, many Internet-related security issues are 

26 addressed, including IP spoofing, time controlled sessions, job ticket alterations, varying 

27 authorization levels, and client-dependent persistent data storing. 

28 The j ob ticket 6 1 shown in Figure 5 A may be used to refer to a specific content 5 1 in the 

29 jobstoreSO. Alternatively, multiplejob tickets 61 may be used to refer a specific content 51, or 

30 onejob ticket 61 may be usedto refer to multiple contents 51. Thus, for example, one job ticket 
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1 61 may specify a repetitive printing task to be completed on similar documents, each of which has 

2 a different content 5 1 . 

3 Using the network 20 shown in Figure 3 , and the corresponding j ob ticket shown in Figure 

4 5A,aclient31 may request and have completed many different electronic services. Forexample, 

5 the client 3 1 may use the network 20 as an e-mail application. 

6 Figure 5B shows the tasks section 68 in detail. The tasks section 68 may include one or 

7 more branch descriptors 66 that include information related to processing for that branch. A 

8 description segment 95 may define the tasks to be completed for each branch. Alternatively, the 

9 description segment 95 may provide a link, or handle, to a file that contains the branch description. 

1 0 The resources segment 96 lists input and output resources associated with the tasks defined for the 

1 1 branch. The lock/unlock flag segment 97 allows a flag to be set to lock and unlock abranch. A 

1 2 bid information segment 98 includes bid information gathered, for example, by the bidding service 

13 90. The bid information 98 may include detailed information such as the IP address of the 

1 4 processors authorized access to the branch, estimated performance information (e.g., estimated 

1 5 cost, delivery time), and other information. Alternatively, the bid information 9 8 may contain a link 

1 6 to another file containing the detailed bid information. The security segment 99 may indicate 

1 7 authorized security levels, and may be used as part of a public key/private key infrastructure. 

1 8 Figure 5C illustrates an embodiment of the control data 69. The control data 69 includes 

19 a client address, which may be a machine address, such as an Internet protocol (IP) address. An 

20 expiration date/time segment may be used to terminate active status of the ticket 61 . Once 

2 1 terminated, the ticket may be deleted from the j ob ticket service, and the corresponding content 

22 51 may be de-referenced. That is, the content 5 1 may no longer be referenced by a specific job 

23 ticket 6 1 . This feature may help eliminate stale data, and free up resources for other job requests 

24 32 (see Figure 7). Finally, the control data 69 may include specific performance requirements, such 

25 as cost an delivery, warranty, required materials, price reductions based on quantity, and other 

26 requirements, for example. 

27 The use of job tickets as XML objects allows clients to define databases, and to store data 

28 through the job ticket service 60 and the job store 50. The databases may be used to hold contact 

29 lists, addresses, and other personal data. The databases may also be used to store any other 

30 generic data. The databases could then be used in conjunction with a variety of e-services 
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1 provided by the processors 80,. For example, an e-mail processor 80 that provides e-mail services 

2 may be used in conjunction with apersonal contact list to send e-mail messages, transfer electronic 

3 files, or to establish a chat room. The e-mail processor 80 may access the contact list at predefined 

4 intervals to send e-mail messages to a select group of e-mail addressees. Furthermore, because 

5 the service center 40 provides a single portal to processors 80 that are coupled to the 

6 communications network 3 5 , the client 3 1 need not have any knowledge of the database structure, 

7 or the processing requirements of the processors 80. 

8 In the specific application of the generic XML database to an e-mail service, the client 3 1 

9 may have established, as a generic database, a list of e-mail contacts. The contacts database may 

10 then be stored in the job store 50 as a content file 51 . A corresponding job ticket 61 may be 

1 1 stored at the j ob ticket service 6 1 . The j ob ticket 6 1 includes control data needed to send and 

12 receive e-mail throughthe service center 40. Furthermore, thejob ticket 61 serves as a pointer 

13 to datainthe content file 51. Inparticular, thejob ticket 61 may store XML data that is related 

14 to other data stored in the content file 5 1 . 

15 Alternatively, the job ticket 61 may store the contacts data. This alternative takes 

1 6 advantage of the fact that the j ob ticket 6 1 includes a vocabulary that can be extended to include 

1 7 the contact data, and that the vocabulary can be further extended to include properties for each 

18 contact inthe contact data. For example, thejob ticket 61 may specify that a contact is a business 

1 9 contact or apersonal contact. Other properties may also be included, such as whether the contacts 

20 in the contact database use mobile phones, land line phones, facsimile machines, and e-mail 

21 addresses. 

22 The use of the j ob ticket 6 1 also allows for parsing, searching and updating the contacts 

23 database. For example, the client 31 may desire to search the contacts database for phone 

24 numbers for all persons whose first name is Joe. This search functionality is included in thejob 

25 ticket 6 1 , and allows thejob ticket service 60 to provide the client with a list of phone numbers for 

26 all entries in the contacts database where the person' s first name is Joe. That is, the contacts 

27 database includes entries having the property of Joe, and the job ticket service is able to search the 

28 contacts database for this property, and to return a list of those entries to the client 3 1 . 

29 The properties function ofthejob ticket 61 also allows thejob ticket service 60to control 
3 0 specific tasks desired by the client 3 1 , or to indicate to the client that a desired task cannot be 
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1 completed. Staying with the example of the contacts database, the client 3 1 may desire to send 

2 afacsimile transmission to all entries in the contact list that have a specific zip code. The job ticket 

3 service 60 can search the contacts database by properties, looking for zip code. The j ob ticket 

4 service 60 can also search the contacts database to determine if any entry does not have a facsimile 

5 machine. For those entries that do not have a facsimile machine, the job ticket service 60 can 

6 originate a message to send back to the client 3 1 , informing the client 3 1 that the facsimile 

7 transmission was undeliverable. Using this functionality, the client 31 need not know anything about 

8 the intended recipients of the facsimile transmission. 

9 Returning to the example of an e-mail service, at the client 3 1 , an e-mail application may 

1 0 be launched in order to send an e-mail message, using the Internet, to one or more contacts in the 

1 1 contact database. However, the client 3 1 need not subscribe to any one Internet service provider. 

1 2 Instead, the service center 40 determines which processor 80 best suits the client' s needs for 

1 3 sending the e-mail message. That is, the service center 40 may select a e-mail service provider (a 

14 processor 80) to send the e-mail message to a chosen destination address. Furthermore, the 

1 5 service center 40 may determine, based on information maintained in the contact database (i.e. , the 

1 6 content 5 1 in the job store 50), which delivery options are desired by a user at the destination 

1 7 address. For example, the destination address user may desire that all e-mail messages be sent to 

1 8 an e-mail box, or that an alert be provided whenever an e-mail message is sent. These delivery 

1 9 features may be stored in the contact database. Alternatively, the delivery features may be stored 

20 in a separate database (content file 5 1 ) in the j ob store 5 0, and the service center may retrieve 

2 1 information form this separate database when determining how to deliver the e-mail message. 

22 Specifically, the separate database may include a variety of users, along with the user' s Internet 

23 address. By comparing the Internet address provided with the out going e-mail to the Internet 

24 addresses in the separate database, the service center 40 can determine desired delivery options 

25 of the addressee. This process for determining delivery options is transparent to the client 3 1 that 

26 originated the e-mail message. All that the client 31 need know is the contact information (e.g., the 

27 Internet address). 

28 The client 3 1 may use the job ticket service 60 to specify a number of performance features 

29 relatedto the e-mail service. For example, the client 31 may want the service center to attempt a 
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1 specified number of delivery attempts, and if delivery does not occur, to send a return message to 

2 the client 3 1 indicating non-delivery of the e-mail message. 

3 As noted above, the job ticket 6 1 , in conjunction with other components of the service 

4 center 40, may also be used to create a persistent, generic object-based data structure, such as an 

5 XML database. An example of the use of a job ticket 61 fortius purpose is illustrated in Figure 

6 5D. Thejob ticket 61 includes a contacts list 84, which may be in the form of an XML database, 

7 or some other generic database. The contacts list 84 may include a structure with entries for 

8 business 85 and personal 86 use. The business 85 and personal 86 contacts structures may include 

9 entries of individuals 87, as shown. Each of the entries 87 may include specific properties, as 

1 0 defined above. In addition, or alternatively, each of the entries 87 may include links to other 

1 1 databases that provide additional information and properties about the individual. 

1 2 While the use of the job ticket 6 1 as a XML database has been described with reference 

13 to an e-mail and messaging service, thejob ticket 6 1 is not so limited. Any data that is capable of 

14 being stored in a database may be accesses and controlled using the job ticket 61 . 

1 5 The features described above, and shown in Figures 5 A-5D, may be replicated in another 

1 6 embodiment of a j ob ticket 6 1 in which all data related to a specific node or branch is located with 

17 that node or branch. Using the example node-tree 10 shown in Figure 2, each node (branch) may 

1 8 include detailed information and features such as resources, authorized processors 80„ lock/unlock 

1 9 flag, bid information, branch description, and other information. 

20 Figure 6 is a diagram of functions of the job ticket service 60. The primary functions of the 

21 job ticket service 60 are to store 73 thejob tickets 61, and to provide access 75 to the job tickets 

22 6 1 i to users such as the client 3 1 and to the processors 80,. To accomplish these storage and 

23 access functions, thejob ticket service 60 may create ajob ticket reference 72 and ajob resource 

24 reference 74. Thejob ticket service 60 also controls job content access 76, updates 77 thejob 

25 tickets 6 1 , as processes are completed and reported by the processors 80 i5 completes the j ob 

26 tickets 6 1 , and reports 78 when all processes are completed for a specific job ticket 6 1 , and 

27 provides an approval process 79 to allow a client 3 1 to approve completion of the tasks designated 

28 in the job ticket 61. 

29 Thejob ticket reference 72 includes a specific reference to a corresponding job ticket 61 

30 Thejob ticket reference 72 may be used by thejob ticket service 60 to allow one or processors 
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1 SOiandclientsSl.toaccessthejobticketeL That is, instead of passing the job ticket 61 toa 

2 processor 80, the job ticket service 60 passes the job ticket reference 72. With the job ticket 

3 reference 72, the processor 80 may access all or apart of ajob ticket 61 so thatthe processor 80 

4 may complete one or more processes. Unlike conventional j ob ticket services, the j ob ticket 

5 service 60 retains the j ob ticket in storage 73 , and only permits users (clients 3 1 s and processors 

6 800 to access the j ob ticket 6 1 . This feature allows multiple processors 80 to simultaneously 

7 complete processes for the specific job request 32 related to the job ticket 61 . 



8 The job ticket service 60 may also create a resources reference 74, and may provide the 

9 resources reference 74 to the processors 80 and the clients 3 1 in a manner similar to that of the j ob 

1 0 ticket reference 72. As noted above with the description accompanying Figure 2, the resources 

1 1 may include physical devices and materials, and may include digital files. Use of the resources 

12 reference 74 may simplify data included in the job ticket 61. 

1 3 Alternatively, information contained in the resources reference 74 maybe included in the 

14 j ob ticket 6 1 , or may be included in other files accessed by the clients 3 1 , and the processors 80,. 

1 5 Figure 7 is a diagram showing operation of selected functions of the j ob ticket service 60. 



16 As shown in Figure 7, the job ticket service 60 includes ajob ticket 61 b which may be a 

1 7 programming obj ect such as that represented in Figure 2, and described above. The j ob ticket 6 1 x 

18 is shown supplied to the job ticket service 60 bythe client 3 1^ The client 3 lj maybe a networked 

1 9 computer or similar device that is capable of transmitting the digital information representing the j ob 

20 ticket 61 1 to the job ticket service 60. To ensure the job ticket 6^ arrives at thejob ticket service 

21 60, thejob ticket61i may contain a reference to thejob ticket service 60, suchasthe service ID 

22 65 illustrated in Figure 5B. The service ID 65 may include a network address of the job ticket 

23 service 60. For example, the service ID 65 may include a universal resource locator (URL) if the 

24 job ticket service 60 is an Internet web site. 



25 AlsoshowninFigure7areclient31 2 andprocessors80 1 - 80 N . The processors 80 x - 80 N 

26 m ay include networked resources such as networked printers, electronic-commerce entities, such 

27 as Internet web sites, and "brick and mortar" entities, such local print shops that are coupled to the 

28 job ticket service 60 using the service bus 41 . 

29 Theclient31 generates ajob request 32 (content 51 andjob ticket data). Usingthe front 

30 end service 30 (not shown in Figure 7) and the service bus 41 , the client 3 1 x sends thejob ticket 
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1 data to the job ticket service 60 and the content 5 1 (not shown in Figure 7) to the job store 50. 

2 The job ticket service 60 may pass the job ticket data to the work flow controller 70, which will 

3 create a job ticket 61 . The content 5 1 , and the job ticket 61 , are related by the job ID 63. The 

4 jobID63 alsoincludesanidentificationofthejobstore50,andalocationwithinthejobstore50 

5 in which the content 5 1 , is stored. In an alternate embodiment, the content 5 1 , may be stored at 

6 the client 3 1 , , and may then be accessed by other users through the service bus 4 1 and the front 

7 end service 30. 

8 Thejob ticket 61, specifies processes that must be completed to finish thejob request 32. 

9 As noted above, Figure 2 illustrates processes required to print a brochure, including the inside 

10 pages and the cover. More that one processor 80, may be required to complete such a job 

1 1 request, or to complete thejob request in the most cost-efficient and/or timely manner. The work 

1 2 flow controller 70 (not showninFigure 7) can determine which of the processors 80 r 80 N should 

1 3 complete a specific process, and, if necessary, the order in which such processes should be 

1 4 completed. The work flow controller 70 may poll the various processors 8 0, to determine which 

1 5 may be used to complete the j ob request. The work flow controller 70 may then notify selected 

1 6 processors 80; that a job request has been registered with the job ticket service 60. 

1 7 For each job ticket 61 , received, thejob ticket service 60 creates a reference 72, to the 

18 jobticket61,. The processor 80, may request access to thejob ticket 61 in order to complete one 

1 9 or more processes. In response, the j ob ticket service 60 provides the processor 80! with the j ob 

20 ticket reference 72,. Thejob ticket reference 72, is then used as an index to thejob ticket 61,. 

2 1 Thejob ticket reference 72, may also be provided to other processors, such as the processor 80 2 , 

22 and to other clients, such as the client 3 1 2 . The processor 80 2 and the client 3 1 2 may then access 

23 the job ticket 61, at the same time as the processor 80, accesses the job ticket 61,. This 

24 simultaneous access allows different processes to be completed in parallel. In the example 

25 illustrated in Figure 2, the processor 80, may complete some or all the processes for the inside 

26 pages, and the processor 80 2 may complete the processes for the cover. 

27 Figure 8 is ablock diagram illustrating an example application of the control features of the 

28 job ticket service 60. The job ticket 61, is referenced to the job content 51, by the job ticketID 

29 63, and information related to the job ticket 6 1 , and the j ob content 5 1 , is passed over the service 

30 bus 41 . The processors 80, can access thejob content 5 1 , and the job ticket 6 1 , using the service 
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1 bus 4 1 . In the illustrated example, the job ticket 6 1 x refers to a j ob request 32 to print a brochure 

2 using the processes outlined in Figure 2. The processor 80 x is designated by the work flow 

3 processor 70 to produce the inside pages of the brochure and the processor 80 2 is designated to 

4 produce the brochure cover. The processor 80 t passes a job ticket access request to the job 

5 ticket service 60 . The access request may include security information that allows the processor 

6 80] to access the job ticket 61 x and the corresponding content 5 1 x or job. In response, the job 

7 ticket service 60 provides a job ticket reference 62 2 that is used by the processor 80] to access 

8 the job ticket 61 j. The processor 80! may use information in the job ticket 61 j to access the 

9 content51i stored inthejob store 50. Since the processor 80 a will produce only the inside pages, 

10 the processor S0 { will not need access to all the information contained in the job ticket 61j. 

1 1 Furthermore, because the job ticket 6 1 x remains in the job ticket service 60, other entities, such 

12 as the processor 80 2 , may continue to access the job ticket. 

1 3 As the processor S0 r completes various processes, the processor 80] may update the 

1 4 content 5 1 x and the job ticket 6 1 x . Thus, the job ticket 6 1 1 may reflect the latest status of the j ob 

1 5 request 32. The status reports may indicate when a node in the node tree 1 0 is completed, when 

16 an interim deadline is completed, when another processor may be used to complete a process, and 

1 7 when all processing is complete. The status report may be included in a digital file that is used by 

1 8 the work flow controller 70, for example. The status report may also be included in a human- 

1 9 readable format, such as a pop-up window on a computer display screen. The processor 80 x may 

20 receive the job ticket reference 72 1; and may complete all scheduled processes, returning the job 

21 ticket reference 72 1 to the job ticket service 60. The processor 80! may also send a copy of the 

22 j ob ticket reference 72i to the processor 80 2 , so that the processor 80 2 may access the job ticket 

23 61 1? and the content 5 1 { and produce the brochure cover. 

24 Figure 9 is a flowchart illustrating an operation 1 00 of the job ticket service 60. The 
2 5 operation 1 00 is based on completing the inside pages nodes shown in Figure 2 . The operation 

26 1 00 may be at least partly under the control of the work flow controller 70, or some equivalent 

27 device. Theoperation 100 assumes that ajob request 32 (job ticket data and content) have been 

28 passed to the service center 40, and that ajob ticket service 60 has been created. The operation 

29 100 begins at start block 101. In review and assign processors block 105, the work flow 

30 controller 70 determines which processors 80! are able and available to complete the job. The 
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1 work flow controller 70, or the optional bidding service 90 may use polling or bidding features to 

2 make the determination. If more than one processor 80i is available, and can satisfy the 

3 requirements of the job ticket 6 1 , the work flow controller 70 may assign one specific processor 

4 80 to the job. Alternatively, the work flow controller 70 may provide a list of processors 80; to 

5 the client 3 1 , and allow the client 3 1 to select one or more processors 80,. 

6 In request job ticket block 1 1 0, a processor 80, having been authorized access to a job 

7 ticket 6 1 , sends an access request to the j ob ticket service 60 using the service bus 4 1 . In block 

8 1 15,uiejobticketserviceverifiesthattheprocessor 80 may access thejob ticket 61. Accessmay 

9 be controlled by a password, an identification, and apublic key/private key security system, for 

1 0 example. In block 115, if the processor 80 is denied access, an error signal may be sent to the 

1 1 processor and/or the client 3 1 , block 1 20. 

1 2 In block 115, if access is authorized, thejob ticket service 60 provides the processor 80 

1 3 with a copy of the job ticket reference 72 corresponding to thejob ticket 6 1 , block 1 25 . The job 

1 4 ticket reference 72 allows the processor 80 to access thejob ticket at anytime. By accessing the 

15 j ob ticket 6 1 at any time, the processor 80 is able to view an updated version of the j ob ticket 61 

1 6 as changes are made to the job ticket 61 by other entities, including other processors 80. 

1 7 In block 1 30, the job store 50 provides access to thejob content 5 1 that is referenced by 

18 thejob ticket 61. Only that part of the content 51 that may be needed by the processor 80 may 

1 9 be supplied by thejob store 50. For example, if the processor 80 is only to generate the inside 

20 pages ofthe brochure, thejob store 50 may not provide access to the content required to produce 

21 the brochure cover. After receiving thejob ticket reference 72 and the content 5 1 , the processor 

22 80 may perform one or more tasks using input resources to produce an interim or final output 

23 resource. With completion of each node in the node tree 1 0, the processor 80 may provide an 

24 input to thejob ticket service 60 to allow modification ofthe job ticket 61, block 135. Ifthe 

25 processor 80 completes all required processes, the processor 80 may provide a final status report 

26 to thejob ticket service 60, block 140, along with any final modifications to thejob ticket 61. 

27 In block 1 4 5 , the j ob ticket service 60 and the work flow controller 70 determine if any 

28 additional tasking may be required. If additional tasks are required, the work flow controller 70 

29 will ensure the appropriate processors 80 are assigned, and the operation returns to block 110. 

30 If no additional processes are required, the operation moves to block 1 50 and ends. 
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1 Figure 10 is a flowchart illustrating the routine 105 for developing a work flow and assigning 

2 processors to the work flow. The process starts in block 200. In block 205, the service center 

3 40 receives a job request 32. The job request 32 may specify performance requirements, 

4 resources, and other parameters, and may include content 5 1 , or a link to the content 5 1 . In block 

5 210, the work flow controller 70 defines a work flow to accomplish the tasks specified in the job 

6 request 32. The work flow may be represented by a node tree, such as the node tree 1 0 shown 

7 in Figure 2. 

8 In block 230, the work flow controller 70 generates a job ticket 61 using the information 

9 provided by the j ob request 32, the work flow generated in block 210, and an appropriate j ob 

10 ticket template. Thejob ticket 61 isthenstoredinthejobticketservice60. Any content51 may 

11 be stored in the job store 50. 

1 2 The work flow controller 70 or thejob ticket service 60 may create a job ticket notice, or 

1 3 other obj ect, and may post the notice, block 250, at the service center 40 so that outside entities 

1 4 (e.g., the processors 80) may acquire sufficient information to bid on completion of thejob ticket 

15 6 1 , or a branch 66 of the j ob ticket 61. In an alternative embodiment, the job ticket 6 1 may be 

16 posted at the service center 40. If the job ticket 61 is posted, thejob ticket 61 may include 

1 7 mechanism to limit access to the j ob ticket or to limit access to certain portions of the j ob ticket 6 1 . 

18 For example, the client extension 64 may not be accessible to the processors 80. 

19 In block 270, the service center 40 receives bids from specific processors 80 and in block 

20 290, the service center 40 evaluates the bids. In block 295 , the service center 40 determines if the 

2 1 client 3 1 submitting thejob request 32 intends to select the winning bid(s), or if the service center 

22 40 makes the selection. If the client is to make the selections, in block 3 00, the service center 40 

23 provides the bid information to the client 3 1 . Then, in block 3 05 , the service center 40 receives 

24 the selections from the client 3 1 . If the service center 40 is to make the selections, in block 310, 

25 the service center 40 selects the winning bid(s). In block 315, the service center notifies the 

26 winning processors . The service center may also store the bid information with the corresponding 

27 job ticket 61 . In block 320, the routine 105 ends. 

2 8 Figure 1 1 is a flowchart illustrating the sub-routine 2 1 0 for defining a work flow. The sub- 
29 routine210 starts in block 350. In block 3 5 5, the work flow controller 70 determines if the work 

3 0 flow will contain multiple branches. If the work flow will contain multiple branches, the work flow 
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1 controller 70 defines the branches, block 360. Inblock 365, the work flow controller 70 selects 

2 a branch for which resources and processes are to be defined. In block 370, the work flow 

3 controller 70 defines input resources for a first process, or node. In block 375, the work flow 

4 controller 70 defines the tasks to be completed for the first process. In block 3 80, the work flow 

5 controller 70 determines the output resources of the first process. Inblock 3 85, the work flow 

6 controller 70 determines if another process is required for the work flow or branch. In no 

7 additional processes are required, the work flow controller 70 determines if another branch is to 

8 be defined, block 390. If another branch is to be defined, the work flow controller 70 selects 

9 another branch, block 365, and the sub-routine 210 continues. If another branch is not to be 

10 defined, the sub-routine ends 210, block 395. The results of the work flow definition may be 

1 1 incorporated into the job ticket 61 (see Figure 10, block 230). 

12 Figure 12 isaflowchartillustratmgmesub^ 

1 3 ticket. The sub-routine 250 starts in block 400. In block 405, the work flow controller 70 

14 determinesiftheworkflowassociatedwiththejobticket61 includes multiple branches. Ifthe 

1 5 work flow does not include multiple branches, the work flow controller posts the job ticket notice 

16 listingthe single branch, block 410. Ifthe work flow includes multiple branches, the workflow 

1 7 controller 70 posts the j ob ticket notice with multiple branches, block 420 . The sub-routine 250 

18 then ends. 

1 9 Figure 1 3 is a flow chart illustrating the sub-routine 290 for evaluating bids. The sub- 

20 routine starts in block 440. In block 445, the bidding service 90 selects a first bid for analysis. In 

2 1 block 450, the bidding service 90 determines ifthe client 3 1 has supplied any evaluation criteria or 

22 requirements. Ifthe client has not supplied evaluation requirements, the bidding service 90 

23 compares the selected bid to a set of standard, minimum performance requirements, which may be 

24 industry-standard requirements block 455. In block 460, the bidding service 90 determines ifthe 

25 bid meets the minimum performance requirements. If the bid does not meet the minimum 

26 performance requirements, the bid is rejected, block 475. Ifthe bid is rejected, the bidding service 

27 90 determines if additional bids were submitted, block 495. If additional bids were submitted, the 

28 bidding processor 90 returns to block 445 and selects the next bid for evaluation. 

29 In block 450, ifthe client 3 1 has supplied performance requirements, the bidding service 

30 90 compares the selected bid to the client-supplied performance requirements, block 465. In 
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1 block 470, the bidding service 90 determines if the selected bid meets the minimum criteria of the 

2 client-supplied performance requirements. If the minimum criteria are not met, the bidding service 

3 90 rejects the bid, block 475. 

4 In blocks 470 and 460, if the minimum criteria are met, the bidding service 90 determines 

5 if the client 3 1 has supplied an evaluation algorithm. If the client 3 1 has not supplied an evaluation 

6 algorithm, the bidding service applies a standard evaluation algorithm, which may be an industry- 

7 standard algorithm, block 485. If the client has supplied an evaluation algorithm, the bidding service 

8 90 applies the client-supplied evaluation algorithm, block 490. The bidding service 90 may then 

9 store the results of the algorithm pending evaluation of all bids. 

10 In block 495, the bidding service 90 determines if any bids remain to be evaluated. If 

1 1 additional bids remain, the sub-routine 290 returns to block 445, and the bidding service selects 

1 2 the next bid for evaluation. In block 495, if no additional bids remain for evaluation, the bidding 

13 service 90 ranks the bids, block 500. The sub-routine 290 then ends, block 505. 

1 4 Figure 1 4 is a flowchart illustrating the routine 1 30 for providing access to a job ticket 6 1 . 

15 Theroutine 130 begins in block 510. In block 51 5, thejob ticket service 60 receives ajob ticket 

1 6 reference 72 from a processor 80, and retrieves the corresponding job ticket 61 , block 520. 

17 hi block 525, thejob ticket service 60 compares the processor identification to processors 

18 listedinthejobticket61 or branches 66 ofthejob ticket 61. Thejob ticket service 60 determines 

19 if the selected branches 66 are locked, block 530. If the selected branches 66 are not locked, the 

20 job ticket service 60 copies the selected branches 66 to the processor 80, block 535. In block 

21 550, the j ob ticket service 60 then determines if the selected branches 66 require locking. If the 

22 selected branches do not require locking, the routine 130 ends, block 560. Ifthe selected branches 

23 66 require locking, thejob ticket service 60 locks the selected branches 66, block 555. The 

24 routine 130 then ends, block 560. 

25 In block 530, if the selected branches 66 are locked, thejob ticket service 60 determines 

26 if the processor 80 intends to modify information in the selected branches 66, block 540. Ifthe 

27 processor 80 will not modify the selected branches 66, thejob ticket service 60 may provide an 

28 error message, block 545. Ifthe selected branches 66 will be modified, thejob ticket service 60 

29 may unlock the selected branches 66. 
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1 Figure 1 5 is a flow diagram of a method for allowing access to a job ticket 6 1 . The method 

2 may execute as part of the routine 115 shown in Figure 9 . The method starts with block 600 . In 

3 block 605, the authentication server 94 receives authentication information from a processor 80 

4 and retrieves a job ticket 6 1 corresponding to a job ticket reference 72 possessed by the processor 

5 80. At this stage of the process, the j ob ticket 6 1 (excluding the public key signature field 67) 

6 contains two information fields, the framework 62 and the client extension 64. The framework 62 

7 contains information such as the service ID, client IP address, expiration date and time, and 

8 processor authorization, as previously described. The client extension 64 contains information such 

9 as credit card number and zip code, also previously described. The information in the job ticket 

10 61 (excluding the public key signature field 67) is then, for example, optionally hashed using, for 

1 1 example, MD5 protocol, and encrypted with apublic key encryption system, block 610, generating 

1 2 a hash number, block 61 5 . Other hashing or encryption techniques may also be used. The hash 

1 3 number is representative of the specific information contained in the job ticket 6 1 . The hash number 

1 4 generated in block 6 1 5 is then encrypted using a standard public key encryption system, block 620. 

1 5 Encrypting the hash number with a private key prevents any user without knowledge of the public 

16 key from modifying the job information. Inblock 625, thejob ticket 61 and the encrypted hash 

1 7 number are concatenated to generate the completed j ob ticket 6 1 . Hence, the completed j ob ticket 

18 61 information fields: 1) the framework 62, 2) the client extension 64, and 3) the public key 

19 signature (encrypted hash number) 67. The method then ends, block 630. 

20 In the illustrated embodiments, the service center 40, and its sub-components, including the 

2 1 work flow controller 70 and the j ob ticket service 60, for example, may be implemented as a single, 

22 special purpose integrated circuit (e.g., an ASIC) having a main or central processor section for 

23 overall, system-level control, and separate circuits dedicated to performing various different 

24 computations, functions and other processes under control of the central processor section. Those 

25 skilled in the art will appreciate that the service center 40 may also be implemented using a plurality 

26 of separate, dedicated or programmable integrated or other electrical circuits or devices (e. g. , 

27 hardwired electronic or logic circuits such as discrete element circuits, or programmable logic 

28 devices such as PLDs, PLAs, or PALs). The service center 40 may also be implemented using 

29 a suitably programmed general purpose computer, e.g., a microprocessor, microcontroller or other 

30 processor device (CPU or MPU), either alone or in conjunction with one or more peripheral (e.g., 
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1 integrated circuit) data and signal processing devices. In general, any device or assembly of 

2 devices on which a finite state machine capable of implementing the flowcharts shown in Figures 

3 9-15 can be used as the service center 40, or its sub-components. 

4 The terms and descriptions used herein are set forth by way of illustration only and are not 

5 meant as limitations . Those skilled in the art will recognize that many variations are possible within 

6 the spirit and scope of the invention as defined in the following claims, and their equivalents, in 

7 which all terms are to be understood in their broadest possible sense unless otherwise indicated. 
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